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The thrust control capability of a retrofit architecture for intelligent turbofan engine 
control and diagnostics is evaluated. The focus of the study is on the portion of the 
hierarchical architecture that performs thrust estimation and outer loop thrust control. The 
inner loop controls fan speed so the outer loop automatically adjusts the engine’s fan speed 
command to maintain thrust at the desired level, based on pilot input, even as the engine 
deteriorates with use. The thrust estimation accuracy is assessed under nominal and 
deteriorated conditions at multiple operating points, and the closed loop thrust control 
performance is studied, all in a complex real-time nonlinear turbofan engine simulation test 
bed. The estimation capability, thrust response, and robustness to uncertainty in the form of 
engine degradation are evaluated. 


Nomenclature 


CLM 

EGT 

FADEC 

FN 

HM 

HPC 

HPT 

IWP 

LPC 

LPT 

OLC 

PI 

PLA 

SVD 

T49 

WF36 

XNR2 


Component Level Model 

Exhaust Gas Temperature 

Full Authority Digital Engine Control 

Net Thrust 

Health Management 

High Pressure Compressor 

High Pressure Turbine 

Integrator Windup Protection 

Low Pressure Compressor 

Low Pressure Turbine 

Outer Loop Control 

Proportional-Integral 

Power Lever Angle 

Singular Value Decomposition 

LPT Inlet Temperature, used for EGT 

Fuel Flow 

Percent Corrected Fan Speed 


I. Introduction 

V ariations in turbofan engine performance can be attributed to several factors including manufacturing 
tolerances and deterioration caused by use. These variations manifest themselves as shifts in engine variables, 
which with use will eventually drive the engine to the limit of operability. Thus the control system must be robust 
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enough to keep the engine operating within acceptable boundaries for several thousand flight cycles. In a typical 
turbofan control system, the pilot’s throttle command is used to set fan speed, which is assumed to be highly 
correlated to engine thrust, the unmeasured variable of interest. However, as the engine ages, the relationship 
between fan speed and thrust changes, so in a degraded engine the thrust level is often different from that produced 
by a new engine for the same throttle setting. In a multi-engine aircraft, this can cause a thrust imbalance and 
unwanted yawing. If thrust were directly controlled, this situation could be avoided. It is possible to achieve this 
result using fan speed control by adjusting the fan speed reference signal to accommodate the degraded throttle-to- 
thrust relationship. 

The adjustment of fan speed command implies the use of an outer loop control. Knowing how much to adjust it, 
and more importantly why it needs to be adjusted, implies intelligence. An Intelligent Propulsion Control 
architecture is one that increases the level of autonomy of the engine. In this context it means that it should at least 
be able to recognize performance deterioration, diagnose faults, and alter its power setting to recover whatever lost 
thrust is possible within the physical constraints of the system, even with degraded capability. 1 Thus an instantiation 
of such an architecture should be populated with at least some basic diagnostic/health management functions along 
with some model-based reasoning ability about the engines’ degraded performance and operability. A conceptual 
architecture of this type was developed and the outer loop thrust control was demonstrated to reduce pilot workload 
in cases where the engines suffered from unequal levels of deterioration, by automatically balancing thrust. 2 The 
current paper focuses on the interaction between the outer loop control portion of the architecture and a single 
engine, in order to evaluate the effectiveness of the approach in the presence of uncertainty of the forms typically 
encountered: model mismatch, nonlinearities, noise, etc. 

The remaining portions of this section give an overview of pertinent aspects of the turbine engine industry’s 
method of engine control as well as an approach that enables the implementation of an Intelligent Propulsion 
Control architecture, given the current practice. This is followed by a description of the proposed architecture in 
general, then details of the current implementation, specifically the thrust estimator and outer loop control. Results 
of an evaluation of the outer loop control to various degradation scenarios are presented next. Finally, conclusions 
are drawn about the robustness of the implementation. 


XN12 P17 T25 PS3, T3 XN25 T49 



Figure 1. Cross section of a high-bypass commercial-type turbofan engine. 
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A. Turbofan Engine Operation and Degradation 

A commercial turbofan engine gas path consists of both rotating and non-rotating components arranged from 
inlet to exhaust (Figure 1). The first rotating component of a turbofan engine is the fan, which is behind the engine 
inlet, and in a commercial engine it provides most of the thrust by accelerating a vast quantity of air in the front of 
the engine and exhausting it directly out the back, bypassing the other components. A small percent of the air passes 
through the remaining rotating components of the engine. The first of these remaining components is the low 
pressure compressor (LPC), which is followed by the high pressure compressor (HPC). This opens into the 
combustor where fuel is injected and burned. The resulting hot gas drives the high pressure turbine (HPT) and the 
low pressure turbine (LPT), which power the fan and compressors. Each of these components affects the engine’s 
performance, and the performance degradation is embodied in component health. The state of each component’s 
health involves characteristics that degrade over time: such features as efficiency, flow capacity, and seal leakage. 
These tend to change slowly over many flights, but may change abruptly with the occurrence of a sudden fault. A 
change of as little as several percent to efficiency and flow capacity may represent the full permissible degradation 
range of the component. 

B. Propulsion Control 

The development of control laws for a turbine engine is an involved process. Typical aircraft engine control 
systems maintain fan speed or engine pressure ratio to regulate thrust, which is not directly measurable. The 
controllers are generally based on a variant of a Proportional-Integral (PI) scheme, combined with limit logic (Figure 
2). This limit logic consists of a series of min select and max select blocks, each of which selects a fuel flow rate 
command based on various physical limits, acceleration/deceleration schedules (reference signal for rotor speed 
rate-of-change vs. rotor speed), and the current operating state (speed governor loops). The final command that exits 
the selection logic block is integrated to produce a new total fuel flow. 3 Thus an increment of zero will result in no 
change in fuel flow, and a constant steady fuel flow will occur when steady state error is eliminated. Other actuators, 
such as bleed valves and guide vanes, are scheduled open loop, which means that they receive a pre-determined 
command based on sensed parameters. 

The limit logic is quite complex to develop and validate, and extensive simulation testing is required before it is 
ready to be implemented. The logic might be developed in a block diagram language format that can be compiled 
into executable code that runs on a flight-certified Full Authority Digital Engine Control (FADEC). The FADEC 
software implementation must go through a rigorous verification and validation process to meet stringent 
certification requirements. 4 The time and cost involved in developing and certifying an engine controller make it 
prohibitive to perform any modification to existing FADEC code. 

C. Retrofit Architectures 

A retrofit control architecture is one that can be added on top of an existing structure without significant 
modification. It should alter the signals into or out of the existing controller, but the controller itself should remain 
intact. For a complex system that requires certification, it might be easier to add externally than to start from scratch, 
so that, if anything, only the new portion needs additional certification. Reference 2 discusses an architecture of this 
form that adjusts the command going into the controller of a degraded engine in order to provide the equivalent 



Figure 2. Typical turbine engine control logic. 
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Figure 3. Intelligent retrofit architecture. The hierarchical structure consists of the Inner Loop Control (in 
the yellow boxes), the Outer Loop Control (in the green boxes), and the Intelligent Control (in the salmon 
box). 


thrust of a new engine. The development of an Intelligent Control structure for the propulsion system of an airplane 
can reduce pilot workload, improve diagnostic capability and fault-tolerant operation, and can thus benefit safety 
and operability, but because of the complexity of the FADEC, it is an excellent candidate to be implemented as a 
retrofit. 


II. Overview of Intelligent Retrofit Architecture 

The proposed retrofit architecture, introduced in Reference 2, is shown in Figure 3. The purpose of the 
architecture is to automatically maintain balanced thrust as the engines deteriorate with use. The system works by 
adjusting the fan speed setpoint of each engine individually so that its net thrust is the same as for a new engine for 
the demanded Power Level Angle (PLA, the pilot’s throttle input), within the physical constraints of the system. The 
architecture is hierarchical with the lowest level performing standard engine control, the next level up maintains 
balanced thrust with an outer loop thrust control, and the top level consists of the health management and intelligent 
thrust demand logic. This whole structure is below the flight/mission level. The role of the mission level controller 
(or intelligent flight controller) is to carry out a mission determined by the capabilities of the overall system (engines 
and airframe) and modify it based on new information about the situation and the health of the system. For instance, 
if the engine is unable to meet the demand in a safe way, this information would be reported to the intelligent flight 
controller or mission manager and the set point is adjusted by logic to maintain balanced thrust at a safe level. The 
mission manager will not be considered here. Figure 3 shows the overall architecture in block diagram form. The 
blocks in yellow represent the engines under standard closed loop fan speed control. Above each of the yellow 
blocks hierarchically is a thrust estimator which generates an estimate of the thrust the engine is producing for use 
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with the outer loop thrust control (green boxes). The blocks along the top in the salmon box represent the structure 
of an intelligent control framework. They consist of the throttle to output (thrust, etc.) mapping, the Health 
Management (HM) block, and the thrust setpoint logic for the outer loop control. The HM block determines the 
fitness of the engine to carry out the expected mission, and finds a way to achieve it if possible, through the thrust 
setpoint logic. Otherwise it coordinates with the Mission Manager to modify the requirements on the engine to an 
acceptable level. 

A. Inner Loop Control 

The Inner Loop Control Level (yellow box in Figure 3) contains the standard engine controller. It is usually a 
FADEC which is designed to maintain fan speed for performance while not exceeding operability limits. It consists 
of an incremental PI controller for steady state fan speed control, as well as acceleration and deceleration schedules 
and other limit logic. The pilot’s input to the controller is PLA, which is mapped to a corrected fan speed command; 
the engine is controlled to this value. 

B. Outer Loop Control 

The Outer Loop Control (green box in Figure 3) adjusts the reference signal for the Inner Loop Control. In 
general, the PLA or throttle, which is a pilot input, sets the fan speed command that is calibrated to achieve a desired 
thrust. However, with engine degradation or some other change in the throttle-to-thrust relationship, the PLA setting 
will not produce the desired thrust. In order to bring the thrust to the correct level, the fan speed command is 
adjusted by the outer loop controller. The FADEC logic is designed to prevent the engine from operating in an 
unsafe mode, so the incremental PLA value (the adjustment due to the outer loop control, so that the resulting fan 
speed command results in the desired thrust level), which enters the FADEC along with the pilot input PLA, will not 
drive the engine into an inappropriate operational regime. The change in fan speed command is obtained by driving 
the error in thrust to zero. Since thrust is not measurable in flight, it must be estimated. The thrust estimator 
implemented here uses a Kalman filter with an optimal reduced order model of the effect of engine degradation.' 
The inputs to the Kalman filter are corrected fuel flow, the open loop scheduled actuators (Variable Bleed Valve and 
Variable Stator Vanes) and the seven corrected sensed engine variables. The use of corrected variables as inputs to 
the linear estimator extends its range because the correction factors have the effect of transforming the engine 
operating condition to a standard operating point, 6 usually sea level, standard day. This allows meaningful 
comparison of engine data at different conditions and different levels of degradation. 7 In a practical sense, it enables 
the Kalman filter to accurately estimate the thrust of a degraded engine at an operating point far from the point 
where the optimal linear estimator was designed. The difference between the estimated and desired thrust is fed 
through a PI controller which adjusts the fan speed command by manipulating PLA until the thrust error is zero. The 
Outer Loop Control level contains integrator windup protection (IWP) on the PI controller. The outer loop controller 
is tuned to avoid introducing unwanted dynamics. It is important that the inner and outer loop controllers are 
operating on different time scales to avoid interaction; since the inner loop provides direct control while the outer 
loop adjusts the reference signal, the outer loop should respond more slowly. 

C. Intelligent Control 

The Intelligent Control Level (salmon box in Figure 3) contains the parts of the control structure that evaluate 
the safety, performance, and capabilities of the engines. Unlike the lower levels for which each engine had a copy, 
there is only a single copy of this level; it monitors the propulsion system of the aircraft. It takes input from both 
engines (control signals, sensed variables, thrust estimate, etc.) to determine each engine’s current health and fitness 
for the mission. It also generates the outer loop thrust command that both engines follow. Ideally, activity at the 
Intelligent Control Level will be limited to assessment and consent, but as the engines age and degrade, or when an 
anomaly occurs, the health management algorithms determine the appropriate action, which generally has to do with 
the fan speed setting. If the Intelligent Control determines that the condition of an engine is such that corrective 
action is beyond the scope of the propulsion control (for instance, a problem that might compromise the mission) it 
communicates this information to the Mission Manager. What the Intelligent Control does not do is adapt the inner 
loop control; since this is a retrofit architecture it is specifically designed to adjust the signal going into the FADEC, 
not the FADEC itself. 


III. Test Setup 

The focus of this paper is the thorough evaluation of the thrust control portion of the architecture implemented 
with a single engine across a wide operating range. Thus the emphasis is on thrust estimation capability and closed 
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Table 1. State Variables, Health Parameters, Actuators, and Auxiliary Output 


State Variables 

Health Parameters 

Actuators 

Auxiliary Output 

Fan Speed, XN12 

FAN efficiency 

Fuel Flow, WF36 

Thrust, FN 

Core Speed, XN25 

FAN How capacity 

Variable Bleed Valve, VBV 


metal temperature 1 

LPC efficiency 

Variable Stator Vanes. VSV 


metal temperature 2 

LPC flow capacity 



metal temperature 3 

HPC elliuency 



metal temperature 4 

HPC flow capacity 



metal temperature 5 

HPT efficiency 



metal temperature 6 

HPT flow capacity 



metal temperature 7 

LPT efficiency 



LPT flow capacity 

Table 2. Sensor Sets and Sensor Standard Deviation (Std. Dev. as % of Steady-State Values at Full Power) 

Sensor Set (Figure 1 ) 

Standard Deviation (%) 

XN12 (rotational speed) 


0.25 

XN25 (rotational speed) 


0.25 

P 1 7 (pressure) 


0.50 

T25 (temperature) 


0.75 

PS3 (pressure) 


0.50 

T.3 (temperature) 


0.75 

T49 (temperature) 


0.75 


loop command tracking. The airframe and related issues such as thrust asymmetry with multiple engines, and pilot 
workload reduction have already been reported. 2 Functions of the Intelligent Control level beyond the nominal 
engine model and corresponding thrust setpoint logic will not be evaluated, i.e., diagnostic algorithms per se will not 
be evaluated. 

A. Real-time hardware-in-the-loop implementation and testing 

The closed loop system was set up on two asynchronous computers, one executing the simulation of the large 
commercial turbofan engine in real time, the other executing the outer loop thrust control portion of the hierarchical 
controller including the FADEC-like engine control. 

B. Large Commercial Turbofan Engine Simulation 

The engine is represented by a nonlinear Component Level Model (CLM) simulation. The model has nine state 
variables, 10 health parameters, three control inputs, and one auxiliary (unmeasured) output all shown in Table 1, as 
well as seven sensors shown in Table 2 (see Figure 1 for sensor locations). It must be noted that for this work, the 
more common P25 measurement is replaced by PI 7; without this substitution, thrust estimation is poor. 5 This 
indicates that the ability to estimate unmeasured outputs is strongly influenced by sensor selection. The Exhaust 
Gas Temperature (EGT) is represented by T49. 

C. Piecewise linear model 

A piecewise linear model is composed of a set of linear models derived at multiple operating conditions. 
Through interpolation of the linear models, the piecewise linear model is able to represent the original nonlinear 
system over a wide operating range, 8 A piecewise linear model is used as the basis for both the nominal model 
which provides the outer loop thrust reference command, and the Kalman filter that performs the thrust estimation. 
The piecewise linear model is developed by linearizing the CLM at multiple altitude-Mach number-PLA triples, 
with PLA varying across its range for each altitude-Mach number pair shown in Figure 4; these altitude-Mach 
number pairs are selected to be along a typical takeoff/climb/cruise trajectory of a commercial turbofan engine. Each 
linear model consists of the linear dynamics in state space form and trim values for all variables. In the piecewise 
linear model structure, the trim values and the state space matrices are linearly interpolated using percent corrected 
fan speed and environmental condition (a function of ambient pressure and engine inlet pressure, which are related 
to altitude and Mach number) as the scheduling parameters. While all trim points are used, it was found that 
interpolating the dynamics from just the sea level static and cruise points (altitude-Mach number-PLA triples) 
provide sufficient fidelity to match the CLM in the neighborhood of the linearization points in most cases, and 
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Figure 4. Flight envelope of the engine showing points along the takeoff/climb/cruise trajectory. 

adding more sets does not significantly improve the results. The piecewise linear model that represents the nominal 
engine does not account for degradation, either in the trim values or the dynamics. In the final implementation of the 
nominal model which provides the thrust reference, just the interpolated trim points were used; the dynamics are 
unnecessary due to the outer loop’s relatively slow time scale. 

D. Thrust Estimation 

The Kalman filter used for thrust estimation is based on the piecewise linear model but it does account for 
degradation through the incorporation of additional sensitivity matrices relating the health parameters to the other 
variables. The special procedure to modify the linear models used to obtain the Kalman gains is described below. 
The Kalman filter equations are interpolated the same way as those of the piecewise linear model. 

The problem of thrust estimation using a Kalman filter has been addressed 5 and demonstrated in a flight 
simulator in the neighborhood of a single operating point. 2 The difficulty in implementing a direct thrust control 
system arises because thrust is not directly measurable and the relationship between fan speed and thrust changes 
with engine deterioration. If engine deterioration could be estimated, thrust could be reconstructed fairly accurately, 
but the limited number of sensors on a typical commercial engine makes the deterioration estimation problem 
underdetermined. The optimal linear approach of Ref. 5 utilizes singular value decomposition (SVD) to reduce the 
number of parameters to be estimated. This can be seen by examining the linearized engine model, which has the 
form 



x = Ax + Bu + Lp + w 

y = Cx + Du + Mp + v (1) 

z = Ex + Fu + Np 

where the health parameter vector, p, appears as input to the system, the auxiliary parameter vector z represents 
thrust, L, M , and N are sensitivity matrices of the appropriate dimension, w and v represent noise. For estimation, eq. 
(1) can be rearranged as 
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x 
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+ Du + v 


z = [E 


N] 


+ Fu 
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where the health parameters, which are assumed to vary slowly, appear as state variables and are thus able to be 
estimated by a Kalman filter as long as the system is observable; unfortunately, typically engines have too few 
sensors to allow all heath parameters to be estimated. Reference 5 demonstrated that by using SVD to reduce the 
number of parameters to be estimated, unmeasurable parameters such as thrust may be estimated in an optimal 
fashion. This is achieved by approximating L, M, and N from eq. (1) by the reduced rank matrix product [L 1 M 7 
N t ] t ~U*V*, and an observable vector q~V*p. Thus the approximations to L, M , and N all have a common right factor, 
making them amenable to the reconstruction of unmeasurable outputs. Thus 


where U =Ui£ k and V=V 7 
approximated as 
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M 

N 
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correspond to the k largest singular values of [L T M 7 N 7 ] 7 . Thus eq. (2) can be 
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where q replaces p as the vector of tuners that is of low enough dimension to be estimated. 

This method can be extended to piecewise linear models by stacking the sensitivity matrices that relate the 
degradation to shifts in the state, sensed, and auxiliary variables from all linearization points to obtain a single right 
factor and thus a common q vector across the flight envelope as 


"A " 


X" 
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u Ml 


^M, 
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U »r 
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u Ln 


u l 
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U M n 


U M n 
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( 3 ) 


The SVD approach to model order reduction defines the optimal set of tuners in a least squares sense. In this 
case, 10 health parameters are replaced by seven tuners, thus introducing additional, albeit known modeling error. 5 
The optimality of the approach lies in the fact that the least information possible is lost during the order reduction, 
and the SVD methodology achieves this by retaining the seven largest of the 10 singular values. Table 3 lists the 
singular values from this implementation, and it can be seen that while the dropped singular values are not 
insignificant, they are still relatively small compared to those that are retained. 
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Table 3. Singular Values of the Health Parameter Sensitivity Matrices (shaded singular values are dropped) 


C| 

c 2 

o 3 

o 4 


°6 

o? 

os 

o 9 

Oio 

28.111 

20.299 

15.936 

12.071 

9.9994 

7.2892 

5.0358 

3.782 

2.1 

1.6902 


E. Proportional-Integral Control with Integrator Windup Protection 

A PI controller is used in the outer loop to adjust the PLA value entering the FADEC such that desired thrust is 
achieved. The PI controller implemented here has fixed gains and is tuned to give an acceptable response for the 
takeoff/climb/cruise trajectory used for testing. In an implementation designed to cover more of the flight envelope, 
a gain-scheduled PI controller might need to be designed. Integrator Windup Protection is necessary for the outer 
control loop because it delivers a APLA command to the inner loop control, which could potentially result in a gross 
value above the maximum PLA limit, especially in cases where a degraded engine’s thrust is significantly lower 
than nominal for a given PLA. Since this would result in a saturating command, the integral term would tend to 
wind up, resulting in an oscillatory response. The protection scheme implemented here is the simple conditional 
integration or integrator clamping where the integration is stopped and the value fixed once the limit is reached, and 
integration is only restarted when the appropriate condition (total PLA entering the FADEC<maximum) is fulfilled. 9 

IV. Evaluation Results 

The engine is represented by a full envelope, nonlinear, high fidelity simulation, and the controller consists of 
the Inner Loop and Outer Loop levels as well as the Nominal Engine Model from the hierarchical intelligent control 
architecture shown in Figure 3, with the inner-loop engine control maintaining fan speed. Many scenarios are run to 
evaluate the system’s performance in real time, using a wide range of component degradation values. The scenarios 
are limited to cases where fan speed adjustment is all that is required. 

A. Evaluation approach 

The evaluation approach utilizes a nonlinear simulation with 10 adjustable health parameters, and a piecewise 
linear Kalman filter to estimate thrust up to the degradation limit of the engine. The evaluation is performed in two 
stages. First, steady state testing is performed, initially of the thrust estimate, and then of outer loop thrust control at 
multiple operating points and degradation conditions. If the thrust estimator is able to reconstruct the true thrust 
accurately, then it stands to reason that the thrust can be controlled to match that of the nominal engine as long as it 
is within the physical limits of the engine to do so. Second, transient testing is performed under outer loop control, 
where engines of various health conditions are run through a takeoff/climb/cruise trajectory to confirm that nominal 
thrust response can be attained by a degraded engine. 

B. Steady State Evaluation 

The purpose of the steady state evaluation is to determine the accuracy of the thrust estimation and control at 
several linearization points. Variations in the level of degradation of the nonlinear engine simulation are used with 
and without sensor noise to test the performance of the closed loop system. Results are reported for thrust estimation 
at multiple levels of engine degradation and PLA values, and for outer loop thrust control at values of PLA away 
from the maximum PLA saturation limit. 

First the simplest scenario is checked. The thrust estimation accuracy is evaluated at each of the 10 steady state 
operating points (Figure 4) for multiple PLA values. The normalized results of evaluating 50 random levels of 
deterioration ranging from 1-5% in each health parameter without sensor noise appear in Table 4. Normalization is 
performed by dividing the data gathered at each operating point by the nominal thrust level at that operating point. It 
can be seen that the error is generally small, indicating good accuracy over the operating range. The estimation error 
and its standard deviation tend to be larger at the operating points in the middle and smaller at the ends, which is to 
be expected because, as previously mentioned, only the state space matrices from the two end points are interpolated 
in the piecewise linear model. An unexpected result, which can be seen by comparing the magnitudes of the mean of 
the error and the mean of the absolute error, is that they are the same in most cases, indicating that there is a 
directional bias in the estimation error; this is probably due to the modeling error introduced by the reduced order 
approximation using SVD. 
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Table 4. Percent Normalized Mean Error, Standard Deviation, and Mean Absolute Error of thrust 
estimation at multiple operating points (Figure 4), no noise, 50 random levels of deterioration ranging from 
1-5% in each health parameter. 


PLA 

1 

Operating 

Point 

1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

84 

Mean(%error) 

-0.01 

1.53 

1.55 

1.66 

1.28 

0.94 

0.55 

0.11 

-0.20 

-0.30 

StdDev(%error) 

0.06 

0.33 

0.43 

0.51 

0.49 

0.35 

0.24 

0.16 

0.12 

0.09 

Mean(abs(%error)) 

0.05 

1.53 

1.55 

1.66 

1.28 

0.94 

0.56 

0.17 

0.20 

0.30 

70 

Mean(%error) 

0.13 

0.74 

0.67 

0.90 

0.95 

0.67 

0.37 

-0.03 

-0.25 

-0.31 

StdDev(%error) 

0.05 

0.25 

0.28 

0.30 

0.28 

0.18 

0.16 

0.12 

0.11 

0.10 

Mean(abs(%error)) 

0.13 

0.74 

0.67 

0.90 

0.95 

0.67 

0.37 

0.09 

0.25 

0.31 

60 

Mean(%error) 

-0.05 

0.63 

0.51 

0.56 

0.52 

0.53 

0.09 

-0.23 

-0.44 

-0.44 

StdDev(%error) 

0.04 

0.20 

0.20 

0.21 

0.21 

0.21 

0.14 

0.09 

0.08 

0.11 

Mean(abs(%error)) 

0.05 

0.63 

0.51 

0.56 

0.52 

0.53 

0.13 

0.23 

0.44 

0.44 


Normalized Thrust and Thrust Estimate, PLA=60 


O o 


Normalized Thrust and Thrust Estimate, PLA=70 



1 23456789 10 

Operating Point 


Normalized Thrust and Thrust Estimate, PLA=80 Normalized Thrust and Thrust Estimate, PLA=84 



Operating Point Operating Point 


Figure 5. True thrust (x) and thrust estimate (O) for nominal engine and worst case degradation 
scenarios, nominal in green, cold section (fan, LPC, HPC) degradation in blue, hot section (HPT, LPT) 
degradation in red, at four constant PLA levels, no sensor noise. 


Figure 5 shows the normalized thrust and thrust estimate for the nominal engine as well as for the worst case 
degradation scenarios at the steady state flight conditions (Figure 4) with various PLA settings, the sensor outputs 
are not corrupted by noise. In this context, worst case is defined as the largest degradation-induced shift in either 
direction — 5% reduction in efficiency and flow capacity of each component in the cold section of engine (fan, LPC, 
HPC) in one case, and 5% shift in efficiency (reduction) and flow capacity (increase) of each component in the hot 
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Figure 6. Steady state thrust for worst case degradation at each operating point (Figure 4), with and 
without outer loop control, PLA=70, sensor noise included, results based on averaging 1000 samples per 
operating point. 

section of engine (HPT, LPT) in the other. 2 Again, normalization is performed by dividing the data gathered at each 
operating point by the nominal thrust level at that operating point. Figure 5 demonstrates the relative size of the 
estimation error to the magnitude of the degradation-induced shift. The error for the cold section degradation case 
tends to be larger than for the hot section degradation case, which is probably a result of the SVD-based model 
reduction; this can be fine-tuned if desired. 5 Since the estimation error is generally small relative to the degradation- 
induced shift, it suggests that the thrust estimate might be used effectively for outer loop thrust control. 

Finally, the steady state scenario is repeated with sensor noise added and outer loop thrust control active. A 
constant PLA value of 70 is used, not near enough to the PLA limit to cause saturation at most test points. Figure 6 
shows how thrust is maintained at the correct value at each operating point with worst case hot section degradation. 
It is clear that for the cold section degradation case, the APLA increment saturates the PLA input at the higher 
operating points and thrust matching is not possible. Even with outer loop control active, the thrust level approaches 
the value obtained with no outer loop control. 

C. Transient Evaluation 

The transient evaluation involves comparing simulated engine responses with varying levels of degradation with 
and without outer loop thrust control. The objective is to determine whether the outer loop control is able to 
maintain the nominal thrust response over a typical flight trajectory. The transient used is a realistic take- 
off/climb/cruise trajectory as shown in Figure 7. The trajectory passes though or near each of the 10 linearization 
points shown in Figure 4, as can be seen in Figure 8, which shows the actual path superimposed on the surface of 
linearization points. 
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Figure 7. Take-off/climb/cruise trajectory. 

Figure 9 though Figure 18 show the worst case scenarios again. Figure 9 through Figure 13 show the cold 
section of the engine scenario (fan, LPC, HPC) where deterioration reduces thrust. This results in a saturating PLA 
command (Figure 10) and thrust is only able to track the nominal thrust for part of the transient before they diverge 
and it moves toward the degraded trajectory. Fuel flow (Figure 11), percent corrected fan speed (Figure 12) and 
EGT (Figure 13) show increased levels as compared to the nominal and degraded cases, which could be construed 
negatively. However if a pilot increases the throttle manually to balance thrust the result is the same, and although 
engine life is closely tied to the temperature and rotational speed, the increased EGT is not a significant concern for 
creep damage until the overtemperature limit is reached. 10 Thrust setpoint logic (not included in this 
implementation) could address these issues by lowering thrust demand, if necessary. An interesting phenomenon is 
the oscillatory segment in these three variables for the case with no outer loop control. This may be a controller 
problem, or possibly a numerical issue with the nonlinear simulation rather than a realistic response, but in any case 
it was not investigated further except to determine that it is fairly repeatable and it is alleviated through use of the 
outer loop control. Figure 14 through Figure 18 show the degraded hot section case where the opposite effect occurs, 
thrust increases allowing fuel flow and EGT to be reduced. Thus there is the double benefit of fuel savings as 
compared to the degraded engine under baseline fan speed control, and lower temperature which translates to 
potentially slower part life consumption. Since degradation often results in increased thrust, 11 outer loop thrust 
control might generally produce these beneficial results. Both Figure 9 and Figure 14 show a large discrepancy 
between the true and estimated thrust responses near the beginning of the transient. The estimated thrust tracks the 
thrust reference (the output of the piecewise linear Nominal Engine Model in Figure 3 upon which the thrust 
estimator is based) rather than the true thrust output of the engine. This is probably due to the fact that the linear 
models were generated at steady state points, and this portion of the transient covers a large region so quickly that it 
moves out of the linear range. The fact that the thrust estimator tracks the nominal thrust model indicates that the 
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Figure 8. Take-off/climb/cruise trajectory superimposed on surface of linearization points. 
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error is caused by a modeling issue with the piecewise linear model, and that it is a consistent interpretation of the 
true thrust based on measured values. Thus, even with this large initial deviation, as long as the outer loop control 
does not cause PLA to saturate, the thrust racks the nominal thrust, so in a full implementation of the Intelligent 
Retrofit Architecture, as long as all engines are receiving the same outer loop command, thrust balance will be 
maintained. 

Figure 19 shows a set of five cases of random deterioration with noise. There is a wide spread of thrust values 
when the baseline fan speed control is used. With outer loop thrust control, the thrust values are all clustered along 
the thrust command. This can be seen easily in the detail in Figure 20, which also gives some insight into how the 
outer loop control works. A plot representing one degraded engine under outer loop control saturates PLA and 
begins to diverge at about 1300 seconds. However, once PLA is reduced to the cruise setting, the saturated variable 
immediately reconverges to the thrust reference. 
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Figure 9. Take-off transient thrust response and estimate with OLC on and off for worst case cold section 
deterioration, plus nominal engine response. 
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Figure 10. Take-off transient PLA input plus APLA with OLC on and off for worst case cold section 
deterioration. 
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Figure 12. Take-off transient normalized Percent Corrected Fan Speed with OLC on and off for worst case 
cold section deterioration. 
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Figure 13. Take-off transient Exhaust Gas Temperature with OLC on and off for worst case cold section 
deterioration. 
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Figure 14. Take-off transient thrust response and estimate with OLC on and off for worst case hot section 
deterioration, plus nominal engine response. 


NASA/TM— 2006-2 14460 


19 


85 r 


80 - 


Nominal OLC off 
Nominal OLC on 

Hot Section Fully Degraded, OLC off 
Hot Section Fully Degraded, OLC on 



65 - 


60 


200 


400 


600 


800 


1000 

Time 


1200 


1400 


1600 


1800 


2000 


Figure 15. Take-off transient PLA input plus APLA with OLC on and off for worst case hot section 
deterioration. 
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Figure 17. Take-off transient normalized Percent Corrected Fan Speed with OLC on and off for worst case 
hot section deterioration. 
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Figure 18. Take-off transient Exhaust Gas Temperature with OLC on and off for worst case hot section 
deterioration. 


NASA/TM- 


-2006-214460 


23 


Normalized Thrust 



Figure 19. Take-off thrust responses for randomly deteriorated engines with OLC on and off, plus outer 
loop thrust reference. 
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Figure 20. Detail of Figure 19 (thrust responses for randomly deteriorated engines with OLC on and off, 
plus outer loop thrust reference). 
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D. Discussion 

The process of degradation is gradual and in general the outer loop compensation will not be noticeable. In cases 
where the physical limit of the engine was not reached, the outer loop control is able to recover the nominal thrust. 
In degradation cases that result in reduced thrust, the outer loop control will probably saturate PLA during take-off 
when demand is high, but in a full implementation of the hierarchical architecture on a multi-engine aircraft (which 
is not considered here) the thrust setpoint logic should be able to maintain thrust at an appropriate level so that a 
yawing moment is not introduced, i.e. it might reduce the thrust demand slightly. However, most of the time 
deterioration results in increased thrust and EGT, so outer loop thrust control can provide a benefit at takeoff when 
temperature minimization is most important and at cruise when fuel consumption is most important. 

The outer loop adjustment of PLA with a maximum PLA limit produces an unnecessarily conservative thrust 
controller. The examples of thrust error due to PLA saturation could potentially be reduced or eliminated if the fan 
speed command inside the FADEC were directly adjusted, especially if the fan speed limit is higher than what 
maximum PLA represents. Since fan speed is actually the variable that corresponds to thrust output, limiting PLA 
can result in a fan speed command that is too low, thus producing less than the desired thrust, even though the 
controller itself is not hitting a limit. If the retrofit architecture were to be implemented within the FADEC, leaving 
the existing control logic untouched, it makes sense for the outer loop to increment fan speed rather than PLA, as 
long as the resulting total fan speed demand still passes through the limit logic. 

The thrust estimator can be tuned in two ways which may have an impact on accuracy. First, the design 
procedure allows for the incorporation of weights on specific variables, 5 which can improve the estimation of some 
variables at the expense of others. No non-unity weights were used in the example given here, but experimentation 
with weights might have resulted in even better results. The second major design approach involves the use of a 
common right factor, V , and thus a common tuning vector q at all operating points; the alternative is to perform 
SVD at each linearization point individually, which might provide better approximation by the reduced order model 
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at each point. However, the approach used specifically avoids discontinuities that might occur in the estimation of q 
as the engine moves between operating points, since the system matrices at individual operating points may have 
significantly different singular values. 

A standard, operating point-independent tuning vector q was derived for use here, as a result of the common V 
matrix in eq. (3). An idealized tuning vector, one which is insensitive to operating point, can potentially provide a 
significant benefit for diagnostics because it should only be sensitive to degradation and faults. 12 Figure 21 shows 
the tuners for a single degraded case of a full take-off transient simulation, and it is clear that they are not constant 
across the flight envelope, and are also affected by PLA movements. This result seems to indicate that, if it is 
possible to obtain tuners that are consistent across the flight envelope, more work is needed to develop them. 

V. Conclusions 

Essential to the implementation of an intelligent retrofit turbine engine control and diagnostics architecture 
(Figure 3), which was designed to reduce pilot workload, is the thrust estimator and outer loop thrust control. This 
paper describes a real-time implementation of this portion of the architecture in simulation, which was evaluated for 
robustness to the types of uncertainties that would be encountered in a real implementation. It was shown to work 
well in all cases evaluated, up to the physical limits of the engine. The accuracy of the thrust estimation was good, 
with the maximum mean estimation error of about 1.6% of nominal for the operating point. Using the thrust estimate 
for feedback produced much tighter regulation of thrust than indirect control through fan speed. The incremental 
control commands added by the system enter the FADEC and as such are still subject to the controller’s limit logic, 
preventing any undesigned-for operation of the engine. Examples showed, however, that incrementing PLA into the 
controller rather than fan speed command within the controller led to conservative performance and potential thrust 
error; direct fan speed command adjustment should be investigated in future work. Because of the success in 
regulating thrust over a wide operating range under a variety of deterioration conditions, it appears that a full 
implementation of such an architecture is a viable approach for this application. The architecture greatly increases 
the autonomy of the propulsion system, and thus enables the concept of an Intelligent Flight Control/Mission 
Manager. 
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